registry / @claudiolabs/claudin / 0.7.4

@claudiolabs/claudin@0.7.4

⚠ Under review

Claudin — Claude Code opened to any LLM (OpenAI, Gemini, DeepSeek, Ollama, and 200+ models)

Static Scan Results

scanned 5h ago · by rust-scanner

Static analysis flagged 24 finding(s) at 93.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsFilesystemNativeBindingsNetworkShellWebSocket

Supply chain

HighEntropyStringsMinifiedObfuscatedProtestwareTelemetryUrlStrings

ManifestNo manifest risk signals triggered.

scanned 455 file(s), 8.16 MB of source, external domains: 1.1.1.1, 127.0.0.1, 169.254.169.254, 169.254.170.2, a.co, anthropic.com, api.anthropic.com, api.cloudflare.com, api.deepseek.com, api.githubcopilot.com, api.groq.com, api.kimi.com, api.minimax.io, api.mistral.ai, api.moonshot.ai, api.openai.com, api.together.xyz, api.x.ai, api.z.ai, app.corridor.dev, auth.openai.com, beacon.claude-ai.staging.ant.dev, bedrock-runtime.us-east-1.amazonaws.com, chatgpt.com, clau.de, claude-staging.fedstart.com, claude.ai, claude.com, claude.fedstart.com, code.claude.com, coding-intl.dashscope.aliyuncs.com, coding.dashscope.aliyuncs.com, docs.anthropic.com, docs.aws.amazon.com, docs.claude.com, docs.expo.dev, duckduckgo.com, example.com, external-content.duckduckgo.com, fonts.googleapis.com, gateway.ai.cloudflare.com, generativelanguage.googleapis.com, git-scm.com, github.com, hooks.example.com, integrate.api.nvidia.com, json-schema.org, json.schemastore.org, links.duckduckgo.com, llm.bankr.bot

Oversized source lightweight scan

dist/chunks/cli-0.7.4-1tkzz9x6.mjs3.47 MB file, sampled 256 KB

FilesystemChildProcessEnvironmentVarsHighEntropyStringsUrlStringsexample.comraw.githubusercontent.com

Source & flagged code

13 flagged

package.jsonView file

Lines 6-46json

6 "repository": {

7 "type": "git",

8 "url": "git+https://github.com/claudio-labs/claudin.git"

9 },

10 "homepage": "https://github.com/claudio-labs/claudin#readme",

11 "bugs": {

Source & flagged code

13 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/postinstall-warmup.mjs

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

dist/chunks/openaiShim-0.7.4-mwtq6jnq.mjsView file

11patternName = generic_password severity = medium line = 11 matchedText = [Content...in(`

Medium

Secret Pattern

Package contains a possible secret pattern.

dist/chunks/openaiShim-0.7.4-mwtq6jnq.mjsView on unpkg · L11

dist/chunks/cli-0.7.4-2apswqf5.mjsView file

1import{B0 as AO,G0 as PF}from"./cli-0.7.4-jgswqtvj.mjs";import{$0 as i3,H0 as u9,I0 as E9,J0 as g9,K0 as G6,L0 as L1,M0 as uG,N0 as CZ,O0 as AB,P0 as PQ,Q0 as MB,R0 as Q6,S0 as q0,... L2: `)G.name="enter";else if(Z==="\t")G.name="tab";else if(Z==="\b"||Z==="\x1B\b")G.name="backspace",G.meta=Z.charAt(0)==="\x1B";else if(Z===""||Z==="\x1B")G.name="backspace",G.meta=...

High

Child Process

Package source references child process execution.

dist/chunks/cli-0.7.4-2apswqf5.mjsView on unpkg · L1

dist/chunks/hookChains-0.7.4-3eqqv9t2.mjsView file

1import{Px as kj,oE as jj,qA as M,rA as Cj,uE as Kj,zx as t}from"./cli-0.7.4-1tkzz9x6.mjs";import"./cli-0.7.4-ge77h9d7.mjs";import"./cli-0.7.4-e2bhfh6d.mjs";import"./cli-0.7.4-6cft4... L2: `)}function ej(j,q,G){let A=_(G.payload),F=U(A),J={EVENT_NAME:G.eventName,OUTCOME:G.outcome,RULE_ID:q.id,PAYLOAD_JSON:F,ERROR:Y(A,["error","reason"])??"",TASK_SUBJECT:Y(A,["task_su... L3: `);return{summary:O,body:P}}async function tj(j){let{action:q,rule:G,event:A,runtime:F}=j;if(F.signal?.aborted)return{status:"skipped",reason:"aborted"};if(!F.onSpawnFallbackAgent)...

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/chunks/hookChains-0.7.4-3eqqv9t2.mjsView on unpkg · L1

dist/chunks/index-0.7.4-9z6mgm05.mjsView file

1import{Hqa as u,Kqa as k}from"./cli-0.7.4-p85h0qry.mjs";import{Pqa as f,Qqa as y}from"./cli-0.7.4-58p1wenr.mjs";function j(z){return new Promise((G,U)=>{let K=g.request({method:"GE... L2: For more information, please visit: `+Xz);let Q=z.originalExpiration??z.expiration;return{...z,...Q?{originalExpiration:Q}:{},expiration:K}},Zz=(z,G={})=>{let U=G?.logger||console,...

High

Cloud Metadata Access

Source reaches cloud instance metadata or link-local credential endpoints.

dist/chunks/index-0.7.4-9z6mgm05.mjsView on unpkg · L1

dist/chunks/index-0.7.4-sajaaw7k.mjsView file

20contains invisible/control Unicode U+200B (zero width space) \v\f\r\x0E\x0F\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1A\x1B\x1C\x1D\x1E\x1F !"#$٪&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_\`abcdefghijklmnopqrstuvwxyz{|}~°·∙√▒─│┼┤┬├┴┐┌└┘β∞φ±½¼≈«»ﻷﻸ��ﻻﻼ� ﺂ£¤ﺄ��ﺎﺏﺕﺙ،ﺝﺡﺥ٠١٢٣٤٥٦٧٨٩ﻑ؛ﺱﺵﺹ؟

Critical

Trojan Source Unicode

Source contains bidi control or invisible Unicode characters associated with Trojan Source attacks.

dist/chunks/index-0.7.4-sajaaw7k.mjsView on unpkg · L20

dist/chunks/bridgeMain-0.7.4-m4rjydb5.mjsView file

•matchType = previous_version_dangerous_delta matchedPackage = @claudiolabs/claudin@0.7.1 matchedIdentity = npm:QGNsYXVkaW9sYWJzL2NsYXVkaW4:0.7.1 similarity = 0.750 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/chunks/bridgeMain-0.7.4-m4rjydb5.mjsView on unpkg

1Cross-file remote execution chain: dist/chunks/bridgeMain-0.7.4-m4rjydb5.mjs spawns dist/chunks/cli-0.7.4-2apswqf5.mjs; helper contains network access plus dynamic code execution. L1: import{pb as yJ,qb as xz,rb as rz,sb as cz,tb as iz,ub as bJ}from"./cli-0.7.4-h24m11yy.mjs";import{wb as Tz}from"./cli-0.7.4-h5274d0h.mjs";import{Eb as TJ,Fb as xJ,Gb as MJ,Hb as w... L2: `).filter((K)=>K.length>0)}function GJ(z){let J=z.write??(($)=>process.stdout.write($)),K=z.verbose,Y=0,O="idle",Z="Ready",R="",B="",U="",F="",L="",A=null,N=[],M=!1,E=null,P=0,x=0,... L3: `)){if(Gz.length===0){w++;continue}let Nz=sz(Gz);w+=Math.max(1,Math.ceil(Nz/j))}if($.endsWith(` ... L31: `),$)m(`${G.red($)} L32: `)},updateSessionStatus($,j,w,Gz){if(w.type==="tool_start")E=w.summary,P=Date.now();p()},clearStatus(){t(),a()},toggleQr(){M=!M,p()},updateSessionCount($,j,w){if(x===$&&_===j&&k===... L33: `);if(N.length>=eJ)N.shift();N.push(f)});if(F.stdout)HJ({input:F.stdout}).on("line",(f)=>{if(Z)Z.write(f+` L34: `);if(z.onDebug(`[bridge:ws] sessionId=${J.sessionId} <<< ${mz(f)}`),z.verbose)process.stderr.write(f+` L35: `);let k=$K(f,J.sessionId,z.onDebug);for(let b of k){if(L.length>=sJ)L.shift();L.push(b),A=b,z.onAc…

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

dist/chunks/bridgeMain-0.7.4-m4rjydb5.mjsView on unpkg · L1

dist/claudin-vscode.vsixView file

•path = dist/claudin-vscode.vsix kind = high_entropy_blob sizeBytes = 91168 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

dist/claudin-vscode.vsixView on unpkg

•path = dist/claudin-vscode.vsix kind = compressed_blob sizeBytes = 91168 magicHex = [redacted]

Medium

Ships Compressed Blob

Package ships compressed or archive-like blobs.

dist/claudin-vscode.vsixView on unpkg

•path = dist/claudin-vscode.vsix kind = nested_archive_needs_inspection sizeBytes = 91168 magicHex = [redacted]

Low

Nested Archive Needs Inspection

Package ships a nested archive or MCP bundle that was inventoried but not recursively analyzed.

dist/claudin-vscode.vsixView on unpkg

dist/chunks/cli-0.7.4-1tkzz9x6.mjsView file

•path = dist/chunks/cli-0.7.4-1tkzz9x6.mjs kind = oversized_source_file sizeBytes = 3642875 magicHex = [redacted]

High

Oversized Source File

Package contains source files above the static scanner size ceiling.

dist/chunks/cli-0.7.4-1tkzz9x6.mjsView on unpkg

dist/chunks/cli-0.7.4-wv6x6pzr.mjsView file

1patternName = generic_password severity = medium line = 1 matchedText = import{E...tml>

Medium

Secret Pattern

Hardcoded password in dist/chunks/cli-0.7.4-wv6x6pzr.mjs

dist/chunks/cli-0.7.4-wv6x6pzr.mjsView on unpkg · L1

Findings

2 Critical8 High7 Medium7 Low

CriticalTrojan Source Unicodedist/chunks/index-0.7.4-sajaaw7k.mjs

CriticalPrevious Version Dangerous Deltadist/chunks/bridgeMain-0.7.4-m4rjydb5.mjs

HighInstall Time Lifecycle Scriptspackage.json

HighChild Processdist/chunks/cli-0.7.4-2apswqf5.mjs

HighShell

HighCloud Metadata Accessdist/chunks/index-0.7.4-9z6mgm05.mjs

HighCross File Remote Execution Contextdist/chunks/bridgeMain-0.7.4-m4rjydb5.mjs

HighObfuscated

HighShips High Entropy Blobdist/claudin-vscode.vsix

HighOversized Source Filedist/chunks/cli-0.7.4-1tkzz9x6.mjs

MediumSecret Patterndist/chunks/openaiShim-0.7.4-mwtq6jnq.mjs

MediumNetwork

MediumEnvironment Vars

MediumProtestware

MediumShips Compressed Blobdist/claudin-vscode.vsix

MediumStructural Risk Force Deep Review

MediumSecret Patterndist/chunks/cli-0.7.4-wv6x6pzr.mjs

LowScripts Present

LowWeak Cryptodist/chunks/hookChains-0.7.4-3eqqv9t2.mjs

LowFilesystem

LowHigh Entropy Strings

LowTelemetry

LowUrl Strings

LowNested Archive Needs Inspectiondist/claudin-vscode.vsix

dist/chunks/openaiShim-0.7.4-mwtq6jnq.mjsView file

Lines 1-15javascript

1import{ri as nO,si as aD,ti as oO}from"./cli-0.7.4-6n295sx3.mjs";import{wi as qO,yi as y1}from"./cli-0.7.4-7t2zsdm5.mjs";import{$i as VO,Ap as lD,Aq as eD,Bp as B1,Bq as O1,Cq as hO,Dq as h1,Kp as iD,LP as Z1,MP as ID,NP as kO,Np as nD,OP as xD,Op as C1,Pp as CO,Qp as bO,Rp as KO,Sp as b1,Xp as cO,Yp as J1,Zp as t,aj as dD,bj as a,cj as SO,dj as EO,ej as BO,eq as UD,fj as pD,gj as NO,iq as rD,rq as T1,sk as zO,sq as yO,tk as S1,tq as g1,uq as TO,vq as GD,wq as fD,xq as tD,yq as sD,zq as gO}from"./cli-0.7.4-1tkzz9x6.mjs";import"./cli-0.7.4-ge77h9d7.mjs";import"./cli-0.7.4-e2bhfh6d.mjs";import". ...

3`);return String(O)}function f1(O,D){if(typeof O==="string")return D?`Error: ${O}`:O;if(!Array.isArray(O)){let Q=JSON.stringify(O??"");return D?`Error: ${Q}`:Q}let $=[];for(let Q of O){if(Q?.type==="text"&&typeof Q.text==="string"){$.push({type:"text",text:Q.text});continue}if(Q?.type==="image"){let W=Q.source;if(W?.type==="url"&&W.url)$.push({type:"image_url",image_url:{url:W.url}});else if(W?.type==="base64"&&W.media_type&&W.data)$.push({type:"image_url",image_url:{url:`data:${W.media_type};base64,${W.data}`}});continue}if(typeof Q?.text==="string")$.push({type:"text",text:Q.text})}if($.leng ...

5`);return D?`Error: ${Q}`:Q}if(D&&$[0]?.type==="text")$[0]={...$[0],text:`Error: ${$[0].text??""}`};else if(D)$.unshift({type:"text",text:"Error:"});return

7`);return D}function _D(O,D,$){let Z=$?.preserveReasoningContent===!0,Q=[],W=new Set,H=new Set;for(let X of O){let _=(X.message??X).content;if(Array.isArray(_)){for(let f of _)if(f.type==="tool_result"&&f.tool_use_id)H.add(f.tool_use_id)}}let Y=FO(D);if(Y)Q.push({role:"system",content:Y});for(let X=0;X<O.length;X++){let L=O[X],_=X===O.length-1,f=L.message??L,R=f.role??L.role,N=f.content;if(R==="user")if(Array.isArray(N)){let G=N.filter((j)=>j.type==="tool_result"),I=N.filter((j)=>j.type!=="tool_result");for(let j of G){let v=j.tool_use_id??"unknown";if(W.has(v))Q.push({role:"tool",tool_call_id ...

8`:"")+R;else{let N=(G)=>{if(!G)return[];if(typeof G==="string")return G?[{type:"text",text:G}]:[];return G};_.content=[...N(f),

9`);v=y.pop()??"";for(let x of y){let S=x.trim();if(!S||S==="data: [DONE]")continue;if(!S.startsWith("data: "))continue;let n;try{n=JSON.parse(S.slice(6))}catch{continue}let p=F1(n.usage);for(let k of n.choices??[]){let d=k.delta,QO=KD(d);if(QO!=null){if(!J)yield{type:"content_block_start",index:W,content_block:{type:"thinking",thinking:""}},J=!0;yield{type:"content_block_delta",index:W,delta:{type:"thinking_delta",thinking:QO}}}if(d.content!=null&&d.content!==""){if(J&&!X)yield{type:"content_block_stop",index:W},W++,X=!0;if(!Y)yield{type:"content_block_start",index:W,content_block:{type:"text" ...

11[Content blocked by provider safety filter]`}}}if(_=K,yield{type:"message_delta",delta:{stop_reason:K,stop_sequence:null},...p?{usage:p}:{}},p)f=!0}}if(!f&&p&&(n.choices?.length??0)===0&&_!==null)yield{type:"message_delta",delta:{stop_reason:_,stop_sequence:null},usage:p},f

12`);if(J)Z.push({type:"text",text:TO(J)})}if($?.message?.tool_calls)for(let Y of $.message.tool_calls){let J=HO(Y.function.name,Y.function.arguments);Z.push({type:"tool_use",id:Y.id,name:Y.function.name,input:J,...Y.extra_content?{extra_content:Y.extra_content}:{},...Y.extra_content?.google?.thought_signature?{signature:Y.extra_content.google.thought_signature}:{}})}let H=$?.finish_reason==="tool_calls"?"tool_use":$?.finish_reason==="length"?"max_tokens":"end_turn";if($?.finish_reason==="content_filter"||$?.finish_reason==="safety")Z.push({type:"text",text:`

14[Content blocked by provider safety filter]`});return{id:O.id??WO(),type:"message",role:"assistant",content:Z,model:O.model??D,stop_reason:H,stop_sequence:null,usage:_O(O.usage)}}}class $1{messages;reasoningEffort;constructor(O,D){this.messages=new D1(O,D),this.reasoningEffort=D}}function k1(O){aO(),cD();let D=new $1({...O.defaultHeaders??{}},O.reasoningEffort);return{beta:D,messages:D.messages}}var W1=b(()=>{x1();R1();C1();B1();XO();PO();oO();rO();E1();U1();UD();eO();S1();xD();T1();iO();wD();h1();g1();b1();v1();fD();GO();q1();y1();vD();QD();fO();VD();NO();AO();MD();I1();wO();SD()});var m1=b(( ...

Long lines were clipped for display.

dist/chunks/cli-0.7.4-2apswqf5.mjsView file

Lines 1-21javascript

1import{B0 as AO,G0 as PF}from"./cli-0.7.4-jgswqtvj.mjs";import{$0 as i3,H0 as u9,I0 as E9,J0 as g9,K0 as G6,L0 as L1,M0 as uG,N0 as CZ,O0 as AB,P0 as PQ,Q0 as MB,R0 as Q6,S0 as q0,T0 as eH,U0 as ZV,V0 as iX,W0 as JB,X0 as cX,Y0 as Y4,Z0 as z6,_0 as CO,a1 as QB,b1 as SO,c1 as vO,d1 as xO,e1 as bO,f1 as RB,g1 as EB,h1 as MO,i1 as _O,j1 as zJ,k1 as q4,l1 as UJ,m1 as qJ,n1 as W1,o1 as KB,q1 as HM}from"./cli-0.7.4-vq696c8w.mjs";import{B1 as OM,w1 as jM,y1 as fG}from"./cli-0.7.4-sw7nh3hq.mjs";import{F2 as Q8,G2 as XJ,H2 as m8}from"./cli-0.7.4-hnfm0p8b.mjs";import{I2 as n8}from"./cli-0.7.4-85txq06q.m ...

2`)G.name="enter";else if(Z==="\t")G.name="tab";else if(Z==="\b"||Z==="\x1B\b")G.name="backspace",G.meta=Z.charAt(0)==="\x1B";else if(Z===""||Z==="\x1B")G.name="backspace",G.meta=Z.charAt(0)==="\x1B";else if(Z==="\x1B"||Z==="\x1B\x1B")G.name="escape",G.meta=Z.length===2;else if(Z===" "||Z==="\x1B ")G.name="space",G.meta=Z.length===2;else if(Z==="\x1F")G.name="_",G.ctrl=!0;else if(Z<="\x1A"&&Z.length===1)G.name=String.fromCharCode(Z.charCodeAt(0)+97-1),G.ctrl=!0;else if(Z.length===1&&Z>="0"&&Z<="9")G.name="number";else if(Z.length===1&&Z>="a"&&Z<="z")G.name=Z;else if(Z.length===1&&Z>="A"&&Z<=" ...

High

Child Process

Package source references child process execution.

dist/chunks/cli-0.7.4-2apswqf5.mjsView on unpkg · L1

3 at`)?" (<anonymous>)":-1<X.stack.indexOf("@")?"@unknown:0:0":""}return`

4`+aK+J+cU}function B8(J,Q){if(!J||iK)return"";iK=!0;var X=Error.prepareStackTrace;Error.prepareStackTrace=void 0;try{var U={DetermineComponentFrameRoot:function(){try{if(Q

5`),w=L.split(`

6`);for(B=U=0;U<x.length&&!x[U].includes("DetermineComponentFrameRoot");)U++;for(;B<w.length&&!w[B].includes("DetermineComponentFrameRoot");)B++;if(U===x.length||B===w.length)for(U=x.length-1,B=w.length-1;1<=U&&0<=B&&x[U]!==w[B];)B--;for(;1<=U&&0<=B;U--,B--)if(x[U]!==w[B]){if(U!==1||B!==1)do if(U--,B--,0>B||x[U]!==w[B]){var a=`

7`+x[U].replace(" at new "," at ");return J.displayName&&a.includes("<anonymous>")&&(a=a.replace("<anonymous>",J.displayName)),a}while(1<=U&&0<=B);break}}}finally{iK=!1,Error.prepareStackTrace=X}return(X=J?J.displayName||J.name:"")?n(X):""}function Z0(J,Q){switch(J.tag){case 26:case 27:case 5:return n(J.type);case 16:return n("Lazy");case 13:return J.child!==Q&&Q!==null?n("Suspense Fallback"):n("Suspense");case 19:return n("SuspenseList");case 0:case 15:return B8(J.type,!1);case 11:return B8(J.type.render,!1);case 1:return B8(J.type,!0);case 31:return n("Activity");default:return""}}function u8 ...

8Error generating stack: `+U.message+`

9`+U.stack}}function d8(J,Q){if(typeof J==="object"&&J!==null){var X=lU.get(J);if(X!==void 0)return X;return Q={value:J,source:Q

10 `+(U.join(" > ")+`

12No matching component was found for:

13 `)+J.join(" > ")}return null},C8.getPublicRootInstance=function(J){if(J=J.current,!J.child)return null;switch(J.child.tag){case 27:case 5:return o6(J.child.stateNode);default:return J.child.stateNode}},C8.injectIntoDevTools=function(){var J={bundleType:0,version:GD,rendererPackageName:XD,currentDispatcherRef:G8,reconcilerVersion:"19.2.0"};if(MU!==null&&(J.rendererConfig=MU),typeof __REACT_DEVTOOLS_GLOBAL_HOOK__>"u")J=!1;else{var Q=__REACT_DEVTOOLS_GLOBAL_HOOK__;if(Q.isDisabled||!Q.supportsFiber)J=!0;else{try{ZZ=Q.inject(J),p7=Q}catch(X){}J=Q.checkDCE?!0:!1}}return J},C8.isAlreadyRendering=fu ...

14`,Y),H=j===-1?Z.substring(Y):Z.substring(Y,j),V=sQ(H);if(q=Math.max(q,V),G)z++;else z+=V===0?1:Math.ceil

15`)q+=V,Y=0;else q+=V,Y+=z7(V)}return q}var iM=8;var sB=b(()=>{O6();mQ()});function tM(){let Z=new Map;for(let[K,G]of Object.entries(U0)){for(let[z,q]of Object.entries(G))U0[z]={open:`\x1B[${q[0]}m`,close:`\x1B[${q[1]}m`},G[z]=U0[z],Z.set(q[0],q[1]);Object.defineProperty(U0,K,{value:G,enumerable:!1})}return Object.defineProperty(U0,"codes",{value:Z,enumerable:!1}),

16`,`

17`).split(`

18`).map((z)=>g_(k_(z),K,G)).join(`

19`)}var Q4="\x1B",b2="",E_,yY="\x07",PY="[",T_="]",U3="m",q3=0,mY=39,fY=49,wY=59,kY=38,gY=48,hY=58,C_=5,S_=2,z3,uY,pY,cY,v_,lY=(Z)=>Array.from(v_.segment(Z),({segment:K})=>K),SY=8,dY=(Z)=>`${Q4}${PY}${Z}${U3}`,vY=(Z)=>`${Q4}${z3}${Z}${yY}`,aY=(Z)=>{let K=Z.split(";").map((z)=>z===""?q3:Number.parseInt(z,10)),G=[];for(let z=0;z<K.length;z++){let q=K[z];if(!Number.isFinite(q))continue;if(q===kY||q===gY||q===hY){if(z+1>=K.length)break;let Y=K[z+1];if(Y===C_&&Number.isFinite(K[z+2])){G.push([q,Y,K[z+2]]),z+=2;continue}let j=K[z+2],H=K[z+3],V=K[z+4];if(Y===S_&&Number.isFinite(j)&&Number.isFinite(H) ...

20`),D=lY(V),N=0;for(let[M,F]of D.entries()){if(z+=F,F===Q4&&D[M+1]!=="\\"){let{groups:_}=uY.exec(V

21`){if(q)z+=vY("");z+=P_(Y)}else if(F===`

Long lines were clipped for display.

dist/chunks/index-0.7.4-sajaaw7k.mjsView file

Lines 1-31javascript

1import{Nqa as A,Qqa as v}from"./cli-0.7.4-58p1wenr.mjs";var D8=A((i)=>{var B1=i&&i.__assign||function(){return B1=Object.assign||function($){for(var J,Z=1,K=arguments.length;Z<K;Z++){J=arguments[Z];for(var W in J)if(Object.prototype.hasOwnProperty.call(J,W))$[W]=J[W]}return $},B1.apply(this,arguments)};Object.defineProperty(i,"__esModule",{value:!0});i.namedReferences=i.bodyRegExps=void 0;var u6="~",c6="~~";function k4($,J){var Z={},K={},W=$.split(c6),H=!1;for(var X=0;W.length>X;X++){var F=W[X].split(u6);for(var M=0;M<F.length;M+=2){var P=F[M],L=F[M+1],j="&"+P+";";if(Z[j]=L,H)Z["&"+P]=L;K[L]=j ...

2`;W+='Content-Disposition: form-data; name="'+$+'"';function H(F,M,P){if(F){var L=P||J.content_type.indexOf("text")==-1;if(W+='; filename="'+encodeURIComponent(M)+`"\r

3`,L)W+=`Content-Transfer-Encoding: binary\r

4`;W+="Content-Type: "+J.content_type+`\r

5\r

6`,W+=L?F.toString("binary"):F.toString("utf8")}K(null,W+`\r

7`)}if((J.file||J.buffer)&&J.content_type){var X=J.filename?J.filename:J.file?X9(J.file):$;if(J.buffer)return H(J.buffer,X,!0);H9(J.file,function(F,M){if(F)return K(F);H(M,X,!0)})}else{if(!J.value)throw Error("value missing for multipart!");if(typeof J.value=="object")return K(Error("Object received for "+$+", expected string."));if(J.content_type)W+=`\r

8`,W+="Content-Type: "+J.content_type;W+=`\r

9\r

10`,W+=Buffer.from(String(J.value),"utf8").toString("binary"),H()}}function m8($,J,Z){J=J||{};for(var K in $){var W=Z?Z+"["+K+"]":K,H=$[K];if(H&&typeof H==="object"&&!(H.buffer||H.file||H.content_type))m8(H,J,W);else J[W]=H}return J}});var d8=A((s3,c8)=>{var V9=v("crypto").createHash;function M9($,J,Z){var K=$.split(" ")[0],W=J[0],H=J[1];if(K=="Digest")return j1.generate($,W,H,Z.method,Z.path);else if(K=="Basic")return u8(W,H)}function M4($){return V9("md5").update($).digest("hex")}function u8($,J){var Z=typeof J>"u"?$:[$,J].join(":");return"Basic "+Buffer.from(Z).toString("base64")}var j1={};j1 ...

11`||Q==="\r"||Q==="\t"}function N(Q){return Q==='"'||Q==="'"}function Z1(Q){return Q===">"||U(Q)}function l(Q,Y){return Q.test(Y)}function X4(Q,Y){return!l(Q,Y)}var V=0;$.STATE={BEGIN:V++,BEGIN_WHITESPACE:V++,TEXT:V++,TEXT_ENTITY:V++,OPEN_WAKA:V++,SGML_DECL:V++,SGML_DECL_QUOTED:V++,DOCTYPE:V++,DOCTYPE_QUOTED:V++,DOCTYPE_DTD:V++,DOCTYPE_DTD_QUOTED:V++,COMMENT_STARTING:V++,COMMENT:V++,COMMENT_ENDING:V++,COMMENT_ENDED:V++,CDATA:V++,CDATA_ENDING:V++,CDATA_ENDING_2:V++,PROC_INST:V++,PROC_INST_BODY:V++,PROC_INST_ENDING:V++,OPEN_TAG:V++,OPEN_TAG_SLASH:V++,ATTRIB:V++,ATTRIB_NAME:V++,ATTRIB_NAME_SAW_WHI ...

12Line: `+Q.line+`

13Column: `+Q.column+`

14Char: `+Q.c;return Y=Error(Y),Q.error=Y,G1(Q,"onerror",Y),Q}function I8(Q){if(Q.sawRoot&&!Q.closedRoot)B(Q,"Unclosed root tag");if(Q.state!==

15Actual: `+Q.attribValue);else if(G==="xmlns"&&Q.attribValue!==T)B(Q,"xmlns: prefix must be bound to "+T+`

16Actual: `+Q.attribValue);else{var I=Q.tag,k=Q.tags[Q.tags.length-1]||Q;if(I.ns===k.ns)I.ns=Object.create(k.ns);I.ns[G]=Q.attribValue}Q.attribList.push([Q.attribName,Q.attribValue])}else Q.tag.attributes[Q.attribName]=Q.attribValue,O(Q,"onattribute",{name:Q.attribName,value:Q.attribValue});Q.attribName=Q.attribValue=""}function w1(Q,Y){if(Q.opt.xmlns){var z=Q.tag,G=N4(Q.tagName);if(z.prefix=G.prefix,z.local=G.local,z.uri=z.ns[G.prefix]||"",z.prefix&&!z.uri)B(Q,"Unbound namespace prefix: "+JSON.stringify(Q.tagName)),z.uri=G.prefix;var I=Q.tags[Q.tags.length-1]||Q;if(z.ns&&I.ns!==z.ns)Object.keys ...

17`)Y.line++,Y.column=0;else Y.column++;switch(Y.state){case V.BEGIN:if(Y.state=V.BEGIN_WHITESPACE,G==="\uFEFF")continue;E8(Y,G);continue

18`)Y.line++,Y.column=0;else Y.column++;Y.textNode+=Q.substring(k,z-1)}if(G==="<"&&!(Y.sawRoot&&Y.closedRoot&&!Y.strict))Y.state=V.OPEN_WAKA,Y.startTagPosition

19`)Y.line++,Y.column=0;else Y.column++;if(Y.cdata+=Q.substring(k,z-1),G==="]")Y.state=V.CDATA_ENDING;continue;case V.CDATA_ENDING:if(G==="]")Y.state=V.CDATA_ENDING_2;else Y.cdata+="]"+G,Y.state=V.CDATA;continue;case V.CDATA_ENDING_2:if(G===">"){if(Y.cdata)O(Y,"oncdata",Y.cdata);O(Y,"onclosecdata"),Y.cdata="",Y.state=V.TEXT}else if(G==="]")Y.cdata+="]";else Y.cdata+="]]"+G,Y.state=V.CDATA;continue;case V.PROC_INST:if(G==="?")Y.state=V.PROC_INST_ENDING;else if(U(G))Y.state=V.PROC_INST_BODY;else Y.procInstName+=G;continue;case V.PROC_INST_BODY:if(!Y.procInstBody&&U(G))continue;else if(G==="?")Y.st ...

20\v\f\r\x0E\x0F\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1A\x1B\x1C\x1D\x1E\x1F !"#$٪&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_\`abcdefghijklmnopqrstuvwxyz{|}~°·∙√▒─│┼┤┬├┴┐┌└┘β∞φ±½¼≈«»ﻷﻸ��ﻻﻼ� ﺂ£¤ﺄ��ﺎﺏﺕﺙ،ﺝﺡﺥ٠١٢٣٤٥٦٧٨٩ﻑ؛ﺱﺵﺹ؟¢ﺀﺁﺃﺅﻊﺋﺍﺑﺓﺗﺛﺟﺣﺧﺩﺫﺭﺯﺳﺷﺻﺿﻁﻅﻋﻏ¦¬÷×ﻉـﻓﻗﻛﻟﻣﻧﻫﻭﻯﻳﺽﻌﻎﻍﻡﹽّﻥﻩﻬﻰﻲﻐﻕﻵﻶﻝﻙﻱ■�`},ibm864:"cp864",csibm864:"cp864",cp865:{type:"_sbcs",chars:"ÇüéâäàåçêëèïîìÄÅÉæÆôöòûùÿÖÜø£Ø₧ƒáíóúñÑªº¿⌐¬½¼¡«¤░▒▓│┤╡╢╖╕╣║╗╝╜╛┐└┴┬├─┼╞╟╚╔╩╦╠═╬╧╨╤╥╙╘╒╓╫╪┘┌█▄▌▐▀αßΓπΣσµτΦΘΩδ∞φε∩≡±≥≤⌠⌡÷≈°∙·√ⁿ²■ "},ibm865:"cp865",csibm865:"cp865",cp866:{type:"_sbcs",chars:"АБВГДЕЖЗИЙКЛМНОПРСТУФХЦЧШЩЪЫЬЭЮЯабвгдежзийкл ...

21\v\f\r\x0E\x0F\x10ỨỰỲỶỸÝỴ\x18\x19\x1A\x1B\x1C\x1D\x1E\x1F !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_\`abcdefghijklmnopqrstuvwxyz{|}~ÀẢÃÁẠẶẬÈẺẼÉẸỆÌỈĨÍỊÒỎÕÓỌỘỜỞỠỚỢÙỦŨ ĂÂÊÔƠƯĐăâêôơưđẶ̀̀̉̃́àảãáạẲằẳẵắẴẮẦẨẪẤỀặầẩẫấậèỂẻẽéẹềểễếệìỉỄẾỒĩíịòỔỏõóọồổỗốộờởỡớợùỖủũúụừửữứựỳỷỹýỵỐ`},georgianacademy:{type:"_sbcs",chars:"‚ƒ„…†‡ˆ‰Š‹Œ‘’“”•–—˜™š›œŸ ¡¢£¤¥¦§¨©ª«¬®¯°±²³´µ¶·¸¹º»¼½¾¿აბგდევზთიკლმნოპჟრსტუფქღყშჩცძწჭხჯჰჱჲჳჴჵჶçèéêëìíîïðñòóôõö÷øùúûüýþÿ"},georgianps:{type:"_sbcs",chars:"‚ƒ„…†‡ˆ‰Š‹Œ‘’“”•–—˜™š›œŸ ¡¢£¤¥¦§¨©ª«¬®¯°±²³´µ¶·¸¹º»¼½¾¿აბგდევზჱთიკლმნჲოპჟრსტჳუფქღყშჩცძწჭხჴჯჰჵæçèéêëìíîïðñ ...

22\v\f\r\x0E\x0F\x10\x11\x12\x13Ỷ\x15\x16\x17\x18Ỹ\x1A\x1B\x1C\x1DỴ\x1F !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_\`abcdefghijklmnopqrstuvwxyz{|}~ẠẮẰẶẤẦẨẬẼẸẾỀỂỄỆỐỒỔỖỘỢỚỜỞỊỎỌỈỦŨỤỲÕắằặấầẩậẽẹếềểễệốồổỗỠƠộờởịỰỨỪỬơớƯÀÁÂÃẢĂẳẵÈÉÊẺÌÍĨỳĐứÒÓÔạỷừửÙÚỹỵÝỡưàáâãảăữẫèéêẻìíĩỉđựòóôõỏọụùúũủýợỮ`},iso646cn:{type:"_sbcs",chars:`\x00\x01\x02\x03\x04\x05\x06\x07\b

23\v\f\r\x0E\x0F\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1A\x1B\x1C\x1D\x1E\x1F !"#¥%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_\`abcdefghijklmnopqrstuvwxyz{|}‾��`},iso646jp:{type:"_sbcs",chars:`\x00\x01\x02\x03\x04\x05\x06\x07\b

24\v\f\r\x0E\x0F\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1A\x1B\x1C\x1D\x1E\x1F !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[¥]^_\`abcdefghijklmnopqrstuvwxyz{|}‾��`},hproman8:{type:"_sbcs",chars:" ÀÂÈÊËÎÏ´ˋˆ¨˜ÙÛ₤¯Ýý°ÇçÑñ¡¿¤£¥§ƒ¢âêôûáéóúàèòùäëöüÅîØÆåíøæÄìÖÜÉïßÔÁÃãÐðÍÌÓÒÕõŠšÚŸÿÞþ·µ¶¾—¼½ªº«■»±�"},macintosh:{type:"_sbcs",chars:"ÄÅÇÉÑÖÜáàâäãåçéèêëíìîïñóòôöõúùûü†°¢£§•¶ß®©™´¨≠ÆØ∞±≤≥¥µ∂∑∏π∫ªºΩæø¿¡¬√ƒ≈∆«»… ÀÃÕŒœ–—“”‘’÷◊ÿŸ⁄¤‹›ﬁﬂ‡·‚„‰Â ...

25`)return[];return Z.body}f1.dictionaryAudio=W3});var w6=A((h1)=>{var H3=h1&&h1.__importDefault||function($){return $&&$.__esModule?$:{default:$}};Object.defineProperty(h1,"__esModule",{value:!0});h1.dictionaryDefinition=void 0;var X3=H3(b()),R6=S();async function F3($,J){if(!$)throw Error("Word cannot be empty!");let Z=await(0,X3.default)("get",`${R6.SPICE_BASE}/dictionary/definition/${$}`,J);if(Z.body.toString()===`ddg_spice_dictionary_definition();

26`)return[];return(0,R6.parseSpiceBody)(Z.body)}h1.dictionaryDefinition=F3});var A6=A((m1)=>{var G3=m1&&m1.__importDefault||function($){return $&&$.__esModule?$:{default:$}};Object.defineProperty(m1,"__esModule",{value:!0});m1.dictionaryHyphenation=void 0;var V3=G3(b()),M3=S();async function z3($,J){if(!$)throw Error("Word cannot be empty!");let Z=await(0,V3.default)("get",`${M3.SPICE_BASE}/dictionary/hyphenation/${$}`,J);if(Z.body.toString()===`ddg_spice_dictionary_hyphenation();

27`)return[];return Z.body}m1.dictionaryHyphenation=z3});var j6=A((l1)=>{var L3=l1&&l1.__importDefault||function($){return $&&$.__esModule?$:{default:$}};Object.defineProperty(l1,"__esModule",{value:!0});l1.dictionaryPronunciation=void 0;var P3=L3(b()),U3=S();async function R3($,J){if(!$)throw Error("Word cannot be empty!");let Z=await(0,P3.default)("get",`${U3.SPICE_BASE}/dictionary/pronunciation/${$}`,J);if(Z.body.toString()===`ddg_spice_dictionary_pronunciation();

28`)return[];return Z.body}l1.dictionaryPronunciation=R3});var I6=A((X1)=>{var w3=X1&&X1.__importDefault||function($){return $&&$.__esModule?$:{default:$}};Object.defineProperty(X1,"__esModule",{value:!0});X1.dns=X1.DNSRecordType=void 0;var A3=w3(b()),q6=S(),O6;(function($){$.ANY="any",$.A="a",$.AAAA="aaaa",$.AFSDB="afsdb",$.APL="apl",$.CAA="caa",$.CERT="cert",$.CNAME="cname",$.DHCID="dhcid",$.DLV="dlv",$.DNAME="dname",$.DNSKEY="dnskey",$.DS="ds",$.HIP="hip",$.IPSECKEY="ipseckey",$.KEY="key",$.KX="kx",$.LOC="loc",$.MX="mx",$.NS="ns",$.NSEC="nsec",$.NSEC3="nsec3",$.NSEC3PARAM="nsec3param",$.RRSIG ...

29`)return null;return(0,T6.parseSpiceBody)(K.body,/ddg_spice_[\w]+$\n?((?:.|\n)+)\n?$;?/)}d1.forecast=v3});var C6=A((a1)=>{var k3=a1&&

30`)return null;return(0,b6.parseSpiceBody)(Z.body)}p1.thesaurus=f3});var y6=A((i1)=>{var h3=i1&&i1.__importDefault||function($){return $&&$.__esModule?$:{default:$}};Object.defineProperty(i1,"__esModule",{value:!0});i1.time=void 0;var m3=h3(b()),g6=S();async function l3($,J){if(!$)throw Error("Query cannot be empty!");let Z=await(0,m3.default)("get",`${g6.SPICE_BASE}/time/${$}`,J);return(0,g6.parseSpiceBody)(Z.body)}i1.time=l3});var c3=A((E)=>{var u3=E&&E.__createBinding||(Object.create?function($,J,Z,K){if(K===void 0)K=Z;Object.defineProperty($,K,{enumerable:!0,get:function(){return J[Z]}})}:f ...

Long lines were clipped for display.

dist/chunks/bridgeMain-0.7.4-m4rjydb5.mjsView file

Lines 1-21javascript

1import{pb as yJ,qb as xz,rb as rz,sb as cz,tb as iz,ub as bJ}from"./cli-0.7.4-h24m11yy.mjs";import{wb as Tz}from"./cli-0.7.4-h5274d0h.mjs";import{Eb as TJ,Fb as xJ,Gb as MJ,Hb as wJ,Ib as fJ}from"./cli-0.7.4-mq3qzben.mjs";import{Kb as kJ}from"./cli-0.7.4-r0nqh5aw.mjs";import{ne as mz,pe as LJ,te as OJ}from"./cli-0.7.4-vtnqj21e.mjs";import{Re as VJ,Se as lJ}from"./cli-0.7.4-kz0h2jkr.mjs";import{hf as EJ,jf as oz,lf as DK}from"./cli-0.7.4-0ytxwr14.mjs";import{Kl as AJ,Lj as RJ,Ll as vz,Mj as NK,Pl as BK,RG as JJ,SG as Cz,TG as KJ,UG as ZJ,WG as $J,XG as YJ,YG as XJ,ZG as QJ,_G as WJ,qn as UJ,rn ...

2`).filter((K)=>K.length>0)}function GJ(z){let J=z.write??(($)=>process.stdout.write($)),K=z.verbose,Y=0,O="idle",Z="Ready",R="",B="",U="",F="",L="",A=null,N=[],M=!1,E=null,P=0,x=0,_=1,f=null,k="single-session",b=new Map,d=null,S=0;function Xz($){let j=process.stdout.columns||80,w=0;for(let Gz of $.split(`

3`)){if(Gz.length===0){w++;continue}let Nz=sz(Gz);w+=Math.max(1,Math.ceil(Nz/j))}if($.endsWith(`

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

dist/chunks/bridgeMain-0.7.4-m4rjydb5.mjsView on unpkg · L1

4`))w--;return w}function m($){J($),Y+=Xz($)}function a(){if(Y<=0)return;q(`[bridge:ui] clearStatusLines count=${Y}`),J(`\x1B[${Y}A`),J("\x1B[J"),Y=0}function $z($){a(),J($)}function n($){aJ($).then((j)=>{N=j,p()}).catch((j)=>{q(`QR code generation failed: ${j}`,{level:"error"})})}function o(){a();let $=fz[S%fz.length],j="";if(R)j+=G.dim(" · ")+G.dim(R);if(B)j+=G.dim(" · ")+G.dim(B);m(`${G.yellow($)} ${G.yellow("Connecting")}${j}

5`)}function Vz(){t(),o(),d=setInterval(()=>{S++,o()},150)}function t(){if(d)clearInterval(d),d=null}function p(){if(O==="reconnecting"||O==="failed")return;a();let $=O==="idle";if(M)for(let Jz of N)m(`${G.dim(Jz)}

6`);let j=ez,w=$?G.green:G.cyan,Nz=($?G.green:G.cyan)(Z),Oz="";if(R)Oz+=G.dim(" · ")+G.dim(R);if(B&&k!=="worktree")Oz+=G.dim(" · ")+G.dim(B);if(m(`${w(j)} ${Nz}${Oz}

7`),_>1){let Jz=k==="worktree"?"New sessions will be created in an isolated worktree":"New sessions will be created in the current directory";m(` ${G.dim(`Capacity: ${x}/${_} · ${Jz}`)}

8`);for(let[,Kz]of b){let r=Kz.title?Rz(Kz.title,35):G.dim("Attached"),Mz=QJ(r,Kz.url),Fz=Kz.activity,V=Fz&&Fz.type!=="result"&&Fz.type!=="error"?G.dim(` ${Rz(Fz.summary,40)}`):"";m(` ${Mz}${V}

9`)}}if(_===1){let Jz=k==="single-session"?"Single session · exits when complete":k==="worktree"?`Capacity: ${x}/1 · New sessions will be created in an isolated worktree`:`Capacity: ${x}/1 · New sessions will be created in the current directory`;m(` ${G.dim(Jz)}

10`)}if(_===1&&!$&&E&&Date.now()-P<JJ)m(` ${G.dim(Rz(E,60))}

11`);let Qz=A??U;if(Qz){m(`

12`);let Jz=$?$J(Qz):YJ(Qz),Kz=M?G.dim.italic("space to hide QR code"):G.dim.italic("space to show QR code"),r=f?G.dim.italic(" · w to toggle spawn mode"):"";m(`${G.dim(Jz)}

13`),m(`${Kz}${r}

14`)}}return{printBanner($,j){if(F=$.sessionIngressUrl,L=j,U=KJ(j,F),n(U),K)J(G.dim("Remote Control")+` v99.0.0

15`);if(K){if($.spawnMode!=="single-session")J(G.dim("Spawn mode: ")+`${$.spawnMode}

16`),J(G.dim("Max concurrent sessions: ")+`${$.maxSessions}

17`);J(G.dim("Environment ID: ")+`${j}

18`)}if($.sandbox)J(G.dim("Sandbox: ")+`${G.green("Enabled")}

19`);J(`

20`),Vz()},logSessionStart($,j){if(K){let w=Rz(j,80);$z(G.dim(`[${Cz()}]`)+` Session started: ${G.white(`"${w}"`)} (${G.dim($)})

21`)}},logSessionComplete($,j){$z(G.dim(`[${Cz()}]`)+` Session ${G.green("completed")} (${qz(j)}) ${G.dim($)}

Long lines were clipped for display.

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/chunks/bridgeMain-0.7.4-m4rjydb5.mjsView on unpkg